<!--
  This file is a part of the open-eBackup project.
  This Source Code Form is subject to the terms of the Mozilla Public License, v. 2.0.
  If a copy of the MPL was not distributed with this file, You can obtain one at
  http://mozilla.org/MPL/2.0/.
  
  Copyright (c) [2024] Huawei Technologies Co.,Ltd.
  
  THIS SOFTWARE IS PROVIDED ON AN "AS IS" BASIS, WITHOUT WARRANTIES OF ANY KIND,
  EITHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO NON-INFRINGEMENT,
  MERCHANTABILITY OR FIT FOR A PARTICULAR PURPOSE.
  -->


<!DOCTYPE html
  PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<html lang="en-us" xml:lang="en-us">
<head>
      <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
   
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<meta name="DC.Type" content="topic">
<meta name="DC.Title" content="Managing Detection Models">
<meta name="product" content="">
<meta name="DC.Relation" scheme="URI" content="en-us_topic_0000001821100600.html">
<meta name="prodname" content="">
<meta name="version" content="">
<meta name="brand" content="00-OceanCyber 300 1.1.0 Online Help">
<meta name="DC.Publisher" content="20241203">
<meta name="DC.Format" content="XHTML">
<meta name="DC.Identifier" content="EN-US_TOPIC_0000001829899789">
<meta name="DC.Language" content="en-us">
<link rel="stylesheet" type="text/css" href="public_sys-resources/commonltr.css">
<title>Managing Detection Models</title>
</head>
<body style="clear:both; padding-left:10px; padding-top:5px; padding-right:5px; padding-bottom:5px"><a name="EN-US_TOPIC_0000001829899789"></a><a name="EN-US_TOPIC_0000001829899789"></a>

<h1 class="topictitle1">Managing Detection Models</h1>
<div id="body0000001693542549"><p id="EN-US_TOPIC_0000001829899789__en-us_topic_0000001282854464_p104720449482">The ransomware protection function manages the signature database through detection models. You can view, update, activate, or delete detection models.</p>
<p id="EN-US_TOPIC_0000001829899789__en-us_topic_0000001282854464_p196680179489">You need to log in to the OceanCyber, choose <span id="EN-US_TOPIC_0000001829899789__text7537163117211"><strong>Data Security</strong></span> &gt; <span class="uicontrol" id="EN-US_TOPIC_0000001829899789__uicontrol8651184012222"><b>Detection Models</b></span>, and find the detection model to be operated. <a href="#EN-US_TOPIC_0000001829899789__en-us_topic_0000001282854464_table1882741584910">Table 1</a> describes the related operations.</p>

<div class="tablenoborder"><a name="EN-US_TOPIC_0000001829899789__en-us_topic_0000001282854464_table1882741584910"></a><a name="en-us_topic_0000001282854464_table1882741584910"></a><table cellpadding="4" cellspacing="0" summary="" id="EN-US_TOPIC_0000001829899789__en-us_topic_0000001282854464_table1882741584910" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Operations related to detection models</caption><colgroup><col style="width:16.580000000000002%"><col style="width:50.080000000000005%"><col style="width:33.33%"></colgroup><thead align="left"><tr id="EN-US_TOPIC_0000001829899789__en-us_topic_0000001282854464_row1182701564912"><th align="left" class="cellrowborder" valign="top" width="16.58165816581658%" id="mcps1.3.3.2.4.1.1"><p id="EN-US_TOPIC_0000001829899789__en-us_topic_0000001282854464_p1682771514910">Job</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="50.085008500850094%" id="mcps1.3.3.2.4.1.2"><p id="EN-US_TOPIC_0000001829899789__en-us_topic_0000001282854464_p1482781519493">Description</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="33.33333333333333%" id="mcps1.3.3.2.4.1.3"><p id="EN-US_TOPIC_0000001829899789__en-us_topic_0000001282854464_p18827141544910">Navigation Path</p>
</th>
</tr>
</thead>
<tbody><tr id="EN-US_TOPIC_0000001829899789__row1393915253598"><td class="cellrowborder" valign="top" width="16.58165816581658%" headers="mcps1.3.3.2.4.1.1 "><p id="EN-US_TOPIC_0000001829899789__p1333814283476">Viewing a detection model</p>
</td>
<td class="cellrowborder" valign="top" width="50.085008500850094%" headers="mcps1.3.3.2.4.1.2 "><p id="EN-US_TOPIC_0000001829899789__en-us_topic_0000001090712911_p910714592398"><strong id="EN-US_TOPIC_0000001829899789__b109264362464628">Scenario</strong></p>
<p id="EN-US_TOPIC_0000001829899789__p433882815471">View the basic information and activation status of a detection model.</p>
</td>
<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.3.3.2.4.1.3 "><p id="EN-US_TOPIC_0000001829899789__p8152156125317">In the detection model list, view the version, import time, signature information, description, and activation status.</p>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001829899789__row1844327195911"><td class="cellrowborder" valign="top" width="16.58165816581658%" headers="mcps1.3.3.2.4.1.1 "><p id="EN-US_TOPIC_0000001829899789__p768154414011">Updating a detection model</p>
</td>
<td class="cellrowborder" valign="top" width="50.085008500850094%" headers="mcps1.3.3.2.4.1.2 "><p id="EN-US_TOPIC_0000001829899789__p368104410015"><strong id="EN-US_TOPIC_0000001829899789__b73252458364628">Scenario</strong></p>
<p id="EN-US_TOPIC_0000001829899789__p17916826488">The latest detection model is preconfigured in the system when the software version is released.</p>
<p id="EN-US_TOPIC_0000001829899789__p87221727387">You can import the latest detection model of OceanCyber.</p>
<ul id="EN-US_TOPIC_0000001829899789__ul174664912"><li id="EN-US_TOPIC_0000001829899789__li1741169912">Querying the update information about a detection model: Visit the following URLs to check whether the detection model is updated:<ul id="EN-US_TOPIC_0000001829899789__ul5101656131015"><li id="EN-US_TOPIC_0000001829899789__li138493532106">Enterprise users: <a href="https://support.huawei.com/enterprise/en/flash-storage/oceancyber-300-pid-258177619/software" target="_blank" rel="noopener noreferrer">Click here</a>.</li><li id="EN-US_TOPIC_0000001829899789__li14987105881012">Carrier website: <a href="https://support.huawei.com/carrier/productNewOffering?col=product&amp;path=PBI1-21430725/PBI1-251363742/PBI1-261607562/PBI1-261914692/PBI1-258177619&amp;resTab=SW" target="_blank" rel="noopener noreferrer">Click here</a>.</li></ul>
</li><li id="EN-US_TOPIC_0000001829899789__li7469637103716">Automatically obtaining the update information about the detection model: The DME IQ Client needs to be deployed on the live network and integrate with the OceanCyber 300 Data Security Appliance.<ol id="EN-US_TOPIC_0000001829899789__ol1868163533815"><li id="EN-US_TOPIC_0000001829899789__li20681535143819">Add the OceanCyber 300 Data Security Appliance to DME IQ (24.0.0 or later). For details about how to add a device, see "Adding a Device" in the <a href="https://support.huawei.com/enterprise/en/flash-storage/dme-iq-pid-256404359?category=operation-maintenance&amp;subcategory=user-guide" target="_blank" rel="noopener noreferrer">DME IQ Client 24.0.x User Guide</a>.</li><li id="EN-US_TOPIC_0000001829899789__li18488220114218">If OceanCyber releases a detection model whose version is later than the latest version in the model list of the current OceanCyber Appliance and the detection model matches the current OceanCyber Appliance, you will receive an email notification. You can obtain the detection model of the new version from the download URL in the email.</li></ol>
</li></ul>
<div class="note" id="EN-US_TOPIC_0000001829899789__note1438885061311"><span class="notetitle"> NOTE: </span><div class="notebody"><ul id="EN-US_TOPIC_0000001829899789__ul8706192894710"><li id="EN-US_TOPIC_0000001829899789__li1170619287472">If DME IQ is not installed, obtain it from the following URLs:<ul id="EN-US_TOPIC_0000001829899789__ul15755841114715"><li id="EN-US_TOPIC_0000001829899789__li9333183913474">Enterprise users: <a href="https://support.huawei.com/enterprise/en/flash-storage/dme-iq-pid-256404359/software" target="_blank" rel="noopener noreferrer">Click here</a>.</li><li id="EN-US_TOPIC_0000001829899789__li4505544114713">Carrier website: <a href="https://support.huawei.com/carrier/productNewOffering?col=product&amp;resTab=SW&amp;path=PBI1-21430725/PBI1-251363742/PBI1-21499296/PBI1-256404359&amp;lang=en" target="_blank" rel="noopener noreferrer">Click here</a>.</li></ul>
</li></ul>
<ul id="EN-US_TOPIC_0000001829899789__ul1414123134712"><li id="EN-US_TOPIC_0000001829899789__li2414133164719">Import or reactivate a detection model of an earlier version if it works better in your scenario.</li></ul>
</div></div>
<p id="EN-US_TOPIC_0000001829899789__p23134321316"><strong id="EN-US_TOPIC_0000001829899789__b8423750764637">Note</strong></p>
<ul id="EN-US_TOPIC_0000001829899789__ul1183915572"><li id="EN-US_TOPIC_0000001829899789__li88892571">A detection model is automatically activated after being imported. The previously activated one enters the <span class="uicontrol" id="EN-US_TOPIC_0000001829899789__uicontrol137901723181420"><b>Inactivated</b></span> state.</li><li id="EN-US_TOPIC_0000001829899789__li6437810155712">The import does not affect ongoing detection jobs. Ongoing detection jobs still use the earlier detection model. The new detection model will be used in the next job.</li></ul>
</td>
<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.3.3.2.4.1.3 "><p id="EN-US_TOPIC_0000001829899789__p16814418016">On the <span class="uicontrol" id="EN-US_TOPIC_0000001829899789__uicontrol185621112112320"><b>Detection Models</b></span> page, click <span class="uicontrol" id="EN-US_TOPIC_0000001829899789__uicontrol6405439133816"><b><span id="EN-US_TOPIC_0000001829899789__text165620316203"><strong>Add</strong></span></b></span>.</p>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001829899789__en-us_topic_0000001282854464_row982731512494"><td class="cellrowborder" valign="top" width="16.58165816581658%" headers="mcps1.3.3.2.4.1.1 "><p id="EN-US_TOPIC_0000001829899789__p143381328104711">Activating a detection model</p>
</td>
<td class="cellrowborder" valign="top" width="50.085008500850094%" headers="mcps1.3.3.2.4.1.2 "><p id="EN-US_TOPIC_0000001829899789__p1083672062810"><strong id="EN-US_TOPIC_0000001829899789__b179645832364628">Scenario</strong></p>
<p id="EN-US_TOPIC_0000001829899789__p0338182819471">To use an inactive detection model for detection, activate it first.</p>
<p id="EN-US_TOPIC_0000001829899789__p13941716182813"><strong id="EN-US_TOPIC_0000001829899789__b164812556464637">Note</strong></p>
<ul id="EN-US_TOPIC_0000001829899789__ul0646193882817"><li id="EN-US_TOPIC_0000001829899789__li4646838202815">Only detection models in the <span class="uicontrol" id="EN-US_TOPIC_0000001829899789__uicontrol198337382149"><b><span id="EN-US_TOPIC_0000001829899789__text983313386143"><strong>Inactivated</strong></span></b></span> status can be activated.</li><li id="EN-US_TOPIC_0000001829899789__li147176574281">Only one detection model in the <span class="uicontrol" id="EN-US_TOPIC_0000001829899789__uicontrol2521458102812"><b><span id="EN-US_TOPIC_0000001829899789__text36203552310"><strong>Activated</strong></span></b></span> status exists in the system. The activated detection model is automatically deactivated after you activate or import a new detection model.</li><li id="EN-US_TOPIC_0000001829899789__li492625218">If a previously activated detection model is being used for ransomware detection, the newly activated or imported detection model enters the <span class="uicontrol" id="EN-US_TOPIC_0000001829899789__uicontrol15682175751413"><b><span id="EN-US_TOPIC_0000001829899789__text1068175761411"><strong>Activated</strong></span></b></span> state but does not affect the ongoing detection job and will take effect in new jobs.</li></ul>
</td>
<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.3.3.2.4.1.3 "><p id="EN-US_TOPIC_0000001829899789__p8338142854714">Choose <span id="EN-US_TOPIC_0000001829899789__text836715010589"><strong>More</strong></span> &gt; <span id="EN-US_TOPIC_0000001829899789__text3505811103217"><strong>Activate</strong></span> in the <span id="EN-US_TOPIC_0000001829899789__text736715017589"><strong>Operation</strong></span> column on the right of the detection model.</p>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001829899789__en-us_topic_0000001282854464_row582713153493"><td class="cellrowborder" valign="top" width="16.58165816581658%" headers="mcps1.3.3.2.4.1.1 "><p id="EN-US_TOPIC_0000001829899789__p1533815280472">Deleting a detection model</p>
</td>
<td class="cellrowborder" valign="top" width="50.085008500850094%" headers="mcps1.3.3.2.4.1.2 "><p id="EN-US_TOPIC_0000001829899789__p16470103092910"><strong id="EN-US_TOPIC_0000001829899789__b56432238164628">Scenario</strong></p>
<p id="EN-US_TOPIC_0000001829899789__p19631914115414">Detection models that are no longer used for ransomware detection can be deleted.</p>
<p id="EN-US_TOPIC_0000001829899789__p543117398294"><strong id="EN-US_TOPIC_0000001829899789__b43730625464637">Note</strong></p>
<p id="EN-US_TOPIC_0000001829899789__p18423114017299">Only detection models in the <span class="uicontrol" id="EN-US_TOPIC_0000001829899789__uicontrol074344816294"><b><span id="EN-US_TOPIC_0000001829899789__text16678205619225"><strong>Inactivated</strong></span></b></span> status can be deleted.</p>
</td>
<td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.3.3.2.4.1.3 "><p id="EN-US_TOPIC_0000001829899789__p333982814471">Choose <span id="EN-US_TOPIC_0000001829899789__text153978244548"><strong>More</strong></span> &gt; <span id="EN-US_TOPIC_0000001829899789__text75651429153216"><strong>Delete</strong></span> in the <span id="EN-US_TOPIC_0000001829899789__text1939752455419"><strong>Operation</strong></span> column on the right of the detection model.</p>
</td>
</tr>
</tbody>
</table>
</div>
</div>
<div>
<div class="familylinks">
<div class="parentlink"><strong>Parent topic:</strong> <a href="en-us_topic_0000001821100600.html">Managing Ransomware Protection</a></div>
</div>
</div>

<div class="hrcopyright"><hr size="2"></div><div class="hwcopyright">Copyright &copy; Huawei Technologies Co., Ltd.</div></body>
</html>